You can now use your own keys to encrypt your ephemeral OS disks.